Privacy Policy

Welcome to FlowApps ("we," "our," or "us"). We provide next-generation software platforms, SaaS cloud suites (including IlmFlow, BaytFlow, StockFlow), and custom mobile and web application engineering. We are committed to protecting the privacy, confidentiality, and security of our clients, institutional partners, and end users.

1. Information We Collect

When you register, schedule a demo, or subscribe to any FlowApps platform, we may collect the following categories of information:

• Personal Identification Information: Full name, email address, mobile number, designated institution/trust role.
• Institutional Information: Mosque/Trust/Madarsa name, institutional registration details, physical address, and communication channels.
• Payment & Billing Data: Transaction references, subscription plan chosen, and billing details. Note: All online payments are handled directly by RBI-authorized payment aggregators (e.g., Razorpay). FlowApps does NOT store credit/debit card numbers or netbanking passwords on our servers.
• Technical & Usage Data: IP address, device type, browser metadata, operating system, and log telemetry used strictly for platform maintenance and fraud prevention.

2. How We Use Your Information

We process your data strictly for legitimate operational purposes:

• To provision, authenticate, and maintain your organization's cloud account and multi-tenant database.
• To process subscription billing, generate official GST/commercial invoices, and manage service renewals.
• To provide technical support, automated WhatsApp/SMS contributor receipts, and critical administrative security alerts.
• To detect and prevent unauthorized access, fraudulent activity, or violations of our Terms of Service.

3. Data Storage & Security Safeguards

Your data is stored securely on enterprise-grade cloud infrastructure (Google Cloud Platform / Firebase) equipped with 256-bit SSL/TLS encryption in transit and AES-256 encryption at rest. We implement role-based access controls (RBAC), multi-factor authentication, and regular automated security audits.

4. Information Sharing & Third-Party Disclosure

We never sell, rent, or monetize your personal or organizational data to any third party or marketing broker. We disclose information only under strict necessity:

• Authorized Payment Gateways: With licensed payment aggregators (such as Razorpay) strictly for processing online subscription fee transactions securely.
• Legal & Regulatory Compliance: If mandated by Indian law enforcement, court order, or competent regulatory authority.

5. Data Retention & Deletion Rights

We retain your data for the active duration of your subscription. Upon account cancellation or termination, you may request an export of your database in standard CSV/PDF formats and petition for permanent data purge from our cloud servers within 30 days.

6. Cookies & Tracking Technologies

We use essential session cookies to remember authentication state and theme preferences. We do not use third-party behavioral advertising trackers.

7. Grievance Officer & Contact Information

In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of our designated Grievance Officer are: